Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.mft
File: NIWdiibI6Ih3f06AGyC3hd7mVM8.mft (raw, json)
Hash identifier: 5hDjCNdTQxgReN1evtpx8qMHp1ZzbZ4Nk1fgQCmQ8BY=
Subject key identifier: 4D:33:C5:37:B4:92:B5:14:84:F9:C8:FD:B2:2A:CC:2C:42:B0:65:92
Authority key identifier: 34:85:9D:8A:26:C8:E8:88:77:7F:4E:80:1B:20:B7:85:DE:E6:54:CF
Certificate issuer: /CN=34859d8a26c8e888777f4e801b20b785dee654cf
Certificate serial: 01963BAED16154C85429CD727AB9BAC121E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIWdiibI6Ih3f06AGyC3hd7mVM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.mft
Manifest number: 11FF
Signing time: Tue 15 Apr 2025 23:00:34 +0000
Manifest this update: Tue 15 Apr 2025 23:00:34 +0000
Manifest next update: Wed 16 Apr 2025 23:00:34 +0000
Files and hashes: 1: KBPaX26T74rF_b98D5vbCS4Nuz0.roa (hash: nU2QowOmWztQQgJHXXYPFT8tIem+quPQmedvSFuZH+I=)
2: NIWdiibI6Ih3f06AGyC3hd7mVM8.crl (hash: ZxU/+jDRAxm+AtVtp+RNrqQSfwOuyM+Noosts45SLF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NIWdiibI6Ih3f06AGyC3hd7mVM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3b:ae:d1:61:54:c8:54:29:cd:72:7a:b9:ba:c1:21:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34859d8a26c8e888777f4e801b20b785dee654cf
Validity
Not Before: Apr 15 23:00:34 2025 GMT
Not After : Apr 16 23:00:34 2025 GMT
Subject: CN=4d33c537b492b51484f9c8fdb22acc2c42b06592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:45:f9:4f:8b:c1:a0:58:ea:c5:dc:11:bd:17:
7c:9c:5b:0b:cc:d3:54:24:fd:57:81:51:93:7b:9f:
bb:d5:61:eb:d3:cf:25:ba:30:af:e4:9d:0a:42:09:
cc:8f:a8:6f:bf:3f:38:af:d2:4b:d3:cb:cc:62:d9:
35:9a:8a:c4:89:e7:61:60:dd:21:09:0e:cb:d8:60:
4e:2e:f8:b9:79:b5:4c:38:cf:08:5e:80:a9:fd:2b:
05:9a:dd:dd:aa:ef:57:39:f3:25:9d:e0:20:f3:d9:
60:bf:27:22:55:4c:15:45:60:57:2c:64:a2:4b:49:
02:94:35:f1:c3:ee:7a:ec:d3:25:c6:0d:bc:9b:54:
7b:08:ec:d6:cc:2d:d0:26:f5:da:b2:52:3d:7d:6a:
fe:bc:8f:da:71:92:35:f2:7f:bd:b7:9d:0d:71:10:
87:27:17:57:33:0c:d2:99:69:8f:48:b6:e1:63:db:
f3:ea:ea:15:e9:ff:31:d9:69:4c:e4:44:d1:93:8a:
41:14:d6:dc:16:c0:9d:2f:62:4d:61:aa:fe:82:4e:
4f:0c:3d:ee:d2:4f:53:9f:46:57:ef:aa:29:f1:6e:
24:76:61:17:b5:90:71:fb:cf:f8:8a:ee:1c:11:c1:
c6:08:63:25:44:78:aa:05:d6:1a:d9:f8:e8:6f:cc:
b1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:33:C5:37:B4:92:B5:14:84:F9:C8:FD:B2:2A:CC:2C:42:B0:65:92
X509v3 Authority Key Identifier:
keyid:34:85:9D:8A:26:C8:E8:88:77:7F:4E:80:1B:20:B7:85:DE:E6:54:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIWdiibI6Ih3f06AGyC3hd7mVM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:01:51:52:18:5d:2f:79:bc:1e:88:84:a8:8b:ba:c1:27:f7:
e3:fc:37:65:0d:73:b1:80:6f:16:56:f8:a3:98:ba:1a:65:2d:
03:be:7c:70:62:50:bc:67:a6:ba:87:04:50:91:74:48:18:f5:
d5:18:8f:47:54:80:8c:33:90:e9:7f:be:c8:a6:f2:92:a7:7f:
25:6a:00:38:52:a7:07:79:07:b0:1f:b2:62:74:67:38:16:4e:
aa:5f:4a:e9:04:e6:7d:cb:5c:44:bc:9d:ce:10:41:0f:2b:2a:
18:0f:4d:ed:27:ac:ec:a7:65:23:97:0b:98:91:d8:83:51:14:
4a:af:40:4e:23:d0:2f:dd:78:5f:fa:6b:df:04:9d:0b:74:3a:
97:ef:77:41:fa:48:67:db:2d:57:9f:ea:42:26:1e:c9:21:df:
94:6d:7b:c3:b1:84:65:1b:32:c5:15:fe:dc:8e:1c:ed:f1:ef:
bc:5e:e6:d4:d0:f9:9f:c7:65:14:d7:d7:49:f4:97:23:b5:10:
0a:3a:73:a0:25:c6:8a:b7:88:66:05:77:c0:b2:75:b8:dd:37:
ef:d9:50:2c:8d:42:73:46:39:36:26:21:4a:4d:9f:6d:e2:59:
80:d0:72:b6:9e:01:23:fe:49:ef:a6:0d:3d:5d:35:0f:87:5b:
fb:c1:8a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 05:10:42 2025 by rpki-client